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the local TCP. The buffer size between the two TCPs may be 
différant. 

The timeout, if prasent, permits the caller to 3et up a timeout 
for ail buffers transmitted on the connection. If a buffer is 
not successfully delivered to the destination within the timeout 
period, the TC? will abort the connection. The présent global 
default is 30 seconds. The buffer retransmission rate may vary; 
most likely, it will be related to the measured time for 
responses from the remote TCP. 

The TCP or some ccmponent of the operating System will verify 
the users -authority to open a connection with the specified 
precsdence or security/compartment. The absence of precedence 
or security/compartment spécification in the OPEN call indicates 
the default values should be used. 

TCP will accept incoming requests as matching only if the 
security/compartment information is exactly the ssme and only if 
the precsdence is equal to or higher than the precedence 
requested in the OPEN call. 

The precedence for the connection is the higher of the values 
requested in the OPEN call and received from the incoming 
request, and fixed at that value for the life of the connection. 

Depending on the TC? implémentation, either a local connection 
name will be returned to the user by the TCP, or the user will 
specify this local connection name (in which case another 
parameter is needed in the call). The local connection name can 
then be used as a short hand term for the connection defined by 
the <local socket, foreign socket> pair. 

Send 

Format: SEND(local connection name, buffer address, byte count, 

EOL flag, URGENT flag [, timeout]) 

This call causes the data contained in the indicatad user buffer 
to be sent on the indicated connection. If the connection has 
not been opened, the SEND is considered an error. Some 
implémentations may allow users to SEND first; in which case, an 
automatic OPEN would be done. If the calling process is not 
authorized to use this connection, an error is returned. 

If the EOL flag is set, the data is the End Of a Letter, and the 

EOL bit will be set in the last TC? segment creatad from the , 
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buffer. If the EOL flag is not set, subséquent SENDs will 
appear to be part of the same letter. 

If the URGENT flag is set, segments resulting from this call 
will hâve the urgent pointer set to indicate that some of the 
data associated with this call is urgent. This facility., for 
example, can be used to simulate "break" signais from terminais 
or error or completion codes from I/O devices. The semantics of 
this signal to the receiving process are unspecified. The 
receiving TCP will signal the urgent condition to the receiving 
process as long as the urgent pointer indicates that data 
preceding the urgent pointer has not been consumed by the 
receiving process. The purpose of urgent is to stimulate the 
receiver to accept some urgent data and to indicate to the 
receiver when ail the currently known urgent data has beer. 
received. 

The number of times the sending user's TC? signais urgent will 
not necessarily be equal to the number of times the receiving 
user will be notified of the presence of urgent data. 

If no foreign socket was specified in the OPEN, but the 
connection is established (e.g., because a LISTENing connection 
has become spécifie due to a foreign segment arriving for the 
local socket), then the designated buffer is sent to the implied 
foreign socket. In general, users who make use of OPEN with an 
unspecified foreign socket can make use of SEND without ever 
explicitiy knowing the foreign socket address. 

However, if a SEND is attempted before the foreign socket 
beccmes specified, an error will be returned. Users can use the 
STATUS call to détermine the status of the connection. In some 
implémentations the TCP may notify the user when an unspecified 
socket is bound . 

If a timeout is specified, then the current timeout for this 
connection is changed to the new one. 

In the simplest implémentation, SEND would not return control to 
the sending process until either the transmission was complété 
or the timeout had been exceeded. However, this simple method 
is both subject to deadlocks (for example, both sides of the 
connection might try to do SENDs bexore doing any RECEIVEs) and 
offers pocr performance, so it is not recommended. A more 
sophisticatad implémentation would return immediately to allow 
the process to run concurrently with network I/O, and, 
furthermere, to allow multiple SENDs to be in progress. 
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Multiple SENDs are served in first corne, first served order, so 
the TC? will queue those it cannot service immediately. 

ne hâve implicitly assumed an asynchronous user interface in 
which a SEND later elicits some kind of SIGNAL or 
pseudo-interrupt from the serving TCP. An alternative is to 
return a response immediately. For instance, SENDs might return 
immédiate local acknowledgment, even if the segment sent had not 
been acknowledged by the distant TCP. We could optimistically 
assume eventual success. If we are wrong, the connection will 
close anyway due to the timeout. In implémentations of this 
kind (synchronous), there will still be some asynchronous 
signais, but these will deal with the connection itself, and not 
with spécifie segments or letters. 

NOTA BENE: In order for the process to distinguish among error 
or success indications for different SENDs, it might be 
appropriate for the buffer address to be returned along with the 
coded response to the SEND request. TCP-tc-user signais are 
discussed below, indicating the information which should be 
returned to the calling process. 

Receive 

Format: RECEIVE (local connection name, buffer address, byte 

count) 

This ccmmand allocates a receiving buffer associated with the 
specified connection. If no OPEN précédés this command or the 
calling process is not authorized to use this connection, an 
error is returned. 

In the simplest implémentation, control would not return to the 
calling program until either the buffer was filled, or some 
error occurred, but this scheme is highly subject to deadlocks. 

A more sophisticated implémentation would permit several 
RECEIVEs to be outstanding at once. These would be filled as, 
segments arrive. This strategy permits increased throughput at 
the cost of a more elaborate scheme (possibly asynchronous) to 
notify the calling program that a letter has been received or a 
buffer filled. 

If insufficient buffer space is given to reassemble a compléta 
letter, the EOL flag will not be set in the response to the 
RECEIVE. The buffer will be filled with as much data as it can 
hold. The last buffer required to hold the letter is returned 
with EOL signalée. 
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The remaining parts of a partly delivered letter will be placed 
in buffers as they are made available via successive RECEIVEs. 

If a number of RECEIVEs are outstanding, they may be filled with 
parts of a single long letter or with at most one letter each. 
The return codes associated with each RECEIVE will indicate what 
is contained in the buffer. 

If a buffer size was given in the OPEN call, then ail buffers 
presented in RECEIVE calls must be of exactly that size, or an 
error indication will be returned. 

The URGENT flag will be set only if the receiving user has' 
previously been informed via a TCP-to-user signal, that urgent 
data is waiting. The receiving user should thus be in 
"read-fast" mode. If the URGENT flag is on, additional urgent 
data remains. If the URGENT flag is off, this call to RECEIVE 
has returned ail the urgent data, and the user may now leave 
"read-fast" mode. 

To distinguish among several outstanding RECEIVEs and to take 
care of the case that a letter is smaller .than the buffer 
supplied, the return code is accompanied by both a buffer 
pointer and a byte count indicating the actual length of the 
letter recsived. 

Alternative implémentations of RECEIVE might hâve the TCP 
allocate buffer storage, or the TCP might share a ring buffer 
with the user. Variations of this kind will produce obvious 
variation in user interface to the TCP. 

Close 

Format: CLOSE(local connection name) 

This command causes the connection specified to be closed. If 
the connection is not open or the calling procsss is not 
authorizsd to use this connection, ar. error is returned. 

Closing connections is intended to be a gracsful operation ir. 
the ser.se that outstanding SENDs will be transmitted (and 
retransmitted), as flow control permits, until ail hâve been 
serviced. Thus, it should be acceptable 'to make several SEND 
calls, followed by a CLOSE, and expect ail the data to be sent 
to the destination. It should also be clear that users should 
continue to RECEIVE on CLOSING connections, since the other side 
may be trying to transmit the last of its data. Thus, CLOSE 
means "I hâve no more to send" but does not mean "I will not 
receive any- more." It may happen (if the user level protocol is 
not well thought out) that the closing side is unable to get rid 
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of ail its data before timing out. In this event, CLOSE turns 
into ABORT, and the closing TCP gives up. 

The user may CLOSE the connection at any time on his own 
initiative, or in response to various prompts from the TCP 
(e.g., remota close executed, transmission timeout exceeded, 
destination inaccessible). 

Because closing a connection requires communication with the 
foreign TCP, connections may remain in the closing State for a 
short time. Attempts to reopen the connection before the TCP 
replies to the CLOSE command will resuit in error responses. 

Close also implies end of letter. 

Status 

Format: STATUS(local connection name) 

This is an implémentation dépendent user command and could be 
excluded without adverse effect. Information returned would 
typically corne from the TCB associated with the connection. 

This command returns a data block containing the following 
information : 

local Socket, 
foreign Socket, 
local connection name, 
receive window, 
send window, 
connection state, 

number of buffers awaiting acknowledgment, 

number of buffers pending receipt (including partial ones), 

receive buffer size, 

urgent state, 

pr ecedence, 

security/compartment, 

and default transmission timeout. 

Depending on the state of the connection, or on the 
implémentation itself, some of this information may not be 
available or meaningful. If the calling process is not 
authorized to use this connection, an error is returned. This 
prevents unauthorized processes from gainir.g information about a 
connection. 
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Abort 

Format: ABORT (local connection rame) 

This command causes ail pending SEND3 and REÇOIVES to be 
aborted, the TC3 to be removed, and a spécial RESET message to 
be sent to the TCP on the other side of the connection. 

Depending on the implémentation, users may receive abort 
indications for each out3tanding SEND or RECEIVE, or may simply 
receive an ABORT-acknowledgment. 

TCP-to-User Messages 

It is assumed that the operating System environment provides a 
means for the TC? to asynchronously signal the user program. Wher. 
the TC? does signal a user program, certain information is passed 
to the user. Often in the spécification the information will be 
an error message. In other cases there will be information 
relating to the completion of Processing a SEND or RECEIVE or 
other user call. 

The following information is provided: 

Local Connection Name 
Response String 
Buffer Addrsss 

Byte count (counts bytes received) 

End-of-Letter flag 
End-of-Urgent flag 

TCP/Network Interface 

The TC? calls on a lower level protocol module to actually send and 
receive information over a network. One case is that of the ARPA 
internetwork System where the lower level module is the Internet 
Protocol [2], In most cases the following simple interface would be 
adéquats. 


Aiways 
Always 

Send & Receive 
Receive 
Receive 
Receive 


V 
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The following two calls satisfy the requirements for the TCP to 
internet protocol module communication: 

SEND (dest, TOS, TTL, Bu f PT R, len-, Id, DF, options => resuit) 

where: 

dest = destination address 

TOS = type of service 

TTL = time to live 

BufPTR = buffer pointer 

len = length of buffer 

Id = Identifier 

DF = Don't Fragment 

options = internet option data 

resuit = response 

OK = datagram sent ok 

Error = error in arguments or local network error 

Note that the precedence is included in the TOS and the 
security/compartment is passed as an option. 

RECV (BufPTR => resuit, source, dest, prot, TOS, len) 

where : 

BufPTR = buffer pointer 
resuit = response 

OK = datagram received ok 
Error = error in arguments 
source = source address 
dest = destination address 
prot = protocol 
TOS = type of service 
options = internet option data 
1er. = length of buffer 

Note that the precedence is in the TOS, and the 
security/compartment is an option. 

Wher. the TC? ser.ds a segment, it exécutas the SEND call supplying 
ail the arguments. The internet protocol module, on receiving 
this call, checks the arguments and préparés and sends the 
message. If the arguments are good and the segment is accepted by 
the local network, the call returns successfully. If either the 
arguments are bad, or the segment is not accepted by the local 
network, the call returns unsuccessfully. On unsuccessful 
returns, a reasonable report should be made as to the cause of the 
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problem, but the details of such reports are up to individual 
implémentations. 

When a segment arrives at the internet protocol module from the 
local network, either there is a pending RECV call from TC? or 
there is not. In the first case, the pending call is satisfied by 
passing the information from the segment to the TCP. In the 
second case, the TCP is notified of a pending segment. 

The notification of a TCP may be via a pseudo interrupt or similar 
mechanism, as appropriate in the particular operating System, 
environment of the implémentation. 

A TCP's RECV call may then either be immediately satisfied by a 
pending segment, or the call may be pending until a segment 
arrives. 

We note that the Internet Protocol prcvides arguments for a type 
of service and for a time to live. TCP uses the following 
settings for these parameters: 

Type of Service = Precedence: none, Package: stream, 
Reliability: higher, Preference: speed, Speed: higher; or 
00011111 . 

Time to Live = one minute, or 00111100. 

Note that the assumed maximum segment lifetime is two minutes. 
Here we explicitly ask that a segment be destroyed if it 
cannot be delivered by the internet System within one minute. 
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3.9. Event Processing 

The activity of the TCP can be characterized as responding to events. 
The events that occur can be cast into three categories: user calls, 
arriving segments, and timeouts. This section describes the 
Processing the TCP does in response to each of the events. In many 
cases the processing required dépends on the state of the connection. 

Events that occur: 

User Calls 

OPEN 

SEND 

RECEIVE 

CLOSE 

ABORT 

STATUS 

Arriving Segments 

SEGMENT ARRIVES 

Timeouts 

USER TIMEOUT 
RETRANSMISSION TIMEOUT 

The model of the TCP/user interface is that user commanda receive an 
immédiate return and possibly a delayed response via an event or 
pseudo interrupt. In the following descriptions, the term "signal" 
means cause a delayed response. 

Error responses are given as character strings. For example, user 
commanda referencing connections that do not exist receive "error: 
connection not open". 

Please note in the following that ail arithmetic on sequence numbers, 
acknowledgment numbers, window3, et cetera, is modulo 2**32 the size 
of the sequence number space. Also note that " = <" means less t'nan or 
equal to. 

A natural way to think about processing incoming segments is to 
imagine that they are first tested for proper sequence number (i.e., 
that their contents lie in the range of the expected "receive window" 
in the sequence number space) and then that they are generally queued 
and processed in sequence number order. 
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When a segment overlaps other already received segments we reconstruct 
the segment to contain just the new data, and adjust the header fields 
to oe consistent. 


vy 


V 


[Page 53] 



January 1980 

Transmission Control Protocol 
Functional Spécification 

OPEN Call 


OPEN Call 

CLOSED STATE (i.e., TCB does not exist) 

Create a new transmission control block (TCB) to hold connection 
State information. Fill in local socket identifier, foreign 
socket, precedence, security/compartment, and user timeout 
information. Verify the security and precedence requested are 
allowed for this user, if not return "error: precedence not 
allowed" or "error: security/compartment not allowed." If active 
and the foreign socket is unspecified, return "error: foreign 
socket unspecified"; if active and the foreign socket is 
specified, issue a SYN segment. An initial send sequencs number 
(ISS) is selected and the TCP receive buffer size is selected (if 
applicable). A SYN segment of the form <SEQ=ISSXCTL=SYN> is sent 
(this may include the buffer size option if applicable). Set 
SND.UNA to ISS, SND.NXT to ISS+1, SND.IBB to ISS+1, enter SYN-SENT 
State, and return. 

If the caller does not hâve access to the local socket specified, 
return "error: connection illégal for this process". If there is 
no room to create a new connection, returr. "error: insufficient 
resour ces" . 

LISTEN STATE 
SYN-SENT STATE 
SYN-RECEIVED STATE 
ESTABLISHED STATE 
FIN-WAIT-1 STATE 
FIN-WAIT-2 STATE 
TIME-WAIT STATE 
CLOSE-WAIT STATE 
CLOSING STATE 

Return "error: connection already exists". 
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SEND Call 


SEND Call 

CLOSED STATE (i.e., TCB does not exist) 

If the user should no hâve access to such a connection, then 
return "error: connection illégal for this process". 

Otherwise, return "error: connection does not exist". 

LISTEN STATE 

If the foreign Socket is specified, then change the connection 
from passive to active, select an ISS, and select the receive 
buffer size. Send a SYN segment, set SND.UNA to ISS, SND.NXT to 
ISS+1 and SND.LBB to ISS+1. Enter SYN-SENT State. Data 
associated with SEND may be sent with SYN segment or queued for 
transmission after entering ESTABLISHED stata. The urgent bit if 
requested in the command should be sent with the first data 
segment sent as a resuit of this command. If there is no room to 
queue the request, respond with "error: insufficient resources". 
If Foreign Socket was not specified, then return "error: foreign 
socket unspecified". 

SYN-SENT STATE 

Queue for processing after the connection is ESTABLISHED. 
Typically, nothing can be sent yet, anyway, because the send 
window has not yet been set by the other side. If no space, 
return "error: insufficient resources". 

SYN-RECEIVED STATE 

Queue for later processing after entering ESTABLISHED State. If 
no space to queue, respond with "error: insufficient resources". 

ESTABLISHED STATE 

Segmentize the buffer, send or queue it for output, with a 
piggybacked acknowledgment (acknowledgment value = RCV.NXT) with 
the data. If there is insufficient space to remember this buffer, 
simply return "error: insufficient resources". 

If remote buffer size is not one octet, and, if this is the end of 
a letter, do the following end-of-letter/buffer-size adjustment 
processing: 
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if EOL = 0 then 

SND.NXT <- SEG.SEQ + SEG.LEN 
if EOL = 1 then 

While SND.LBB < SEG.SEQ + SEG.LEN 
Do SND.LBB <- SND.LBB + SND.BS End 
SND.NXT <- SND.LBB 

If the urgent flag is set, then SND.UP <- SND.NXT-1 and set the 
urgent pointer' in the outgoing segment. 

FIN-WAIT-1 STATE 
FIN-WAIT-2 STATE 
TIME-WAIT STATE 

Return "error: connection closing" and do not service request. 
CLOSE-WAIT STATE 

Segmer.tize any text to be sent and queue for output. If there is 
insufficient space to remember the SEND, return "error: 
insufficient resources" 

CLOSING STATE 


Î1 


Respond with 


error : 


connection closing" 
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RECEIVE Call 

CLOSED STATE (i.e., TCB does not exist) 

If the user should no hâve accsss to such a connection, return 
"error: connection illégal for this process". 

Otherwise return "error: connection does not exist". 

LISTEN STATE 
SYN-SENT STATE 
SYN-RECEIVED STATE 

Queue for Processing aftar entering ESTABLISHED State. If there 
is no rocm to queue this request, respond with "error: 
insufficient resources". 

ESTABLISHED STATE 

If insufficient incoming segments are queued to satisfy the 
request, queue the request. If there is no queue soace to 
remember the RECEIVE, respond with "error: insufficient 
resour ces". 

Reassemble queued incoming segments into recsive buffer and return 
to user. Mark "end of lettar" (EOL) if this is the case. 

If RCV.UP is in advance of the data currently being passed to the 
user r.otify the user of the presence of urgent data. 

When the TC? takes responsibility for delivering data to the user 
that fact must be communicated to the sender via an 
acknowledgment. The formation of such an acknowledgment is 
described below in the discussion of processing an incoming 
segment. 

FIN-WAIT-1 STATE 
FIN-WAIT-2 STATE 

Reassemble and return a letter, or as much as will fit, in the 
user buffer. Queue the request if it cannot be serviced 
immediately. 


y 
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TIME-WAIT STATE 
CLOSE-WAIT STATE 

Since the remote side has already sent FIN, RECEIVEs must be 
satisfied by text already reassembled, but not yet delivered to 
the user. If no reassembled segment text is awaiting delivery, 
the RECEIVE should get a "error: connection closing" response. 
Otherwise, any remaining text can be used to satisfy the RECEIVE. 

CLOSING STATE 

Return "error: connection closing" 
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CLOSE Call 

CLOSED STATE (i.e., TCB does not-exist) 

If the user should no hâve access to such a connection, return 
"error: connection illégal for this process". 

Otherwise, return "error: connection does not exist". 

LISTEN STATE 

Any outstanding RECEIVEs should be returned with "error: closing" 
responses. Delete TCB, return "ok". 

SYN-SENT STATE 

Delete the TCB and return "error: closing" responses to any 
queued SENDs, or RECEIVEs. 

SYN-RECEIVED STATE 

Queue for Processing after entering ESTABLISHED state or 
y segmer.tize and ser.d FIN segment. If the latter, enter FIN-WAIT-1 

state. 

ESTABLISHED STATE 

Queue this until ail preceding SENDs hâve been segmentized, then 
form a FIN segment and ser.d it. In any case, enter FIN-WAIT-1 
State. 

FIN-WAIT-1 STATE 
FIN-WAIT-2 STATE 

Strictly speaking, this is an error and should receive a "error: 
connection closing" response. An "ok" respor.se would be 
acceptable, too, as long as a second FIN is not emitted (the first 
FIN may be rezr ansmitted though). 


J 
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TIME-WAIT STATE 

Strictly speaking, this is an error and should receive a "error: 
connection closing" response. An "ok" response would be 
acceptable, too. However, since the FIN has been sent and 
acknowledged, nothing should be sent (or retransmitted). 

CLOSE-WAIT STATE 

Queue this request until ail preceding SENDs hâve been 
segment!zed; then send a FIN segment, enter CLOSING state. 

CLOSING STATE 

Respond with "error: connection closing" 
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ABORT Call 

CLOSED STATE (i.e., TCB does not exist) 

If the user should no hâve access to such a connection, return 
"error: connection illégal for this process". 

Otherwise return "error: connection does not exist". 

LISTEN STATE 

Any outstanding RECEIVEs should be returned with "error: 
connection reset" responses. Delete TCB, return "ok". 

SYN-SENT STATE 

Delete the TCB and return "reset" responses to any queued SENDs, 
or RECEIVEs. 

SYN-RECEIVED STATE 

Send a RST of the form: 

<SEQ=SND. NXTXACK=RCV. NXTXCTL=RST, ACK> 

and return any unprocessed SENDs, or RECEIVEs with "reset" code, 
delete the TCB. 

ESTABLISHED STATE 

Send a reset segment: 

<SEQ=SND.NXTXACX=RCV.NXTXCTL=R3T,ACX> 

Ail queued SENDs and RECEIVEs should be given "reset" responses; 
ail segments queued for transmission (except for the RST formed 
above) or retransmission should be flushed, delete the TCB. 
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FIN-WAIT-1 STATE 

FIN-WAIT-2 STATE ~ 

A reset segment (RST) should be formed and sent: 

<SEQ=SND. NXTXACX = RCV. NXTXCTL =RST, ACX> 

Outstanding SENDs, RECEIVEs, CLOSEs, and/or segments queued for 
retransmission, or segmentizing, should be flushed, with 
"connection reset" notification to the user, delete the TC3. 

TIME-WAIT STATE 

Respond with "ok" and delete the TC3. 

CLOSE-WAIT STATE 

Fiush any pending SEMDs and RECEIVEs, returning "connection reset" 
responses for them. Form and send a RST segment: 

<3EQ=SND . NXTXACX=RCV. NXTXCTL =RST, ACX> 

Fiush ail segment queues and delete the TC3. 

CLOSING STATE 

Respond with "ok" and delete the TC3; fiush any remaining segment 
queues. If a CLOSE command is still pending, respond "error: 
connection reset". 
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STATUS Call 


i 


i 


STATUS Call 

CLOSED STATE (i.e., TC3 does not exïst) 

If the user should no hâve access to such a connection, return 
"error: connection illégal for this process". 

Otherwise return "error: connection does not exist". 

LISTEN STATE 

Return "state = LISTEN", and the TC3 pointer. 

SYN-SENT STATE 

Return "state = SYN-SENT", and the TC3 pointer. 

SYN-RECEIVED STATE 

Return "state = SYN-RECEIVED", and the TC3 pointer. 

ESTABLISHED STATE 

Return "state = ESTABLISHED", and the TC3 pointer. 

FIN-WAIT-1 STATE 

Return "state = FIN-WAIT-1", and the TC3 pointer. 

FIN-WAIT-2 STATE 

Return "state = FIN-WAIT-2", and the TC3 pointer. 

TIME-WAIT STATE 

Return "state = TIME-WAIT and the TC3 pointer. 

CLOSE-WAIT STATE 

Return "state = CLOSE-WAIT", and the TC3 pointer. 

CLOSING STATE 

Return "state = CLOSING", and the TC3 pointer. 
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SEGMENT ARRIVES 

If the State is CLOSED (i.e., TC3 does not exist) then 

ail data in the inccming segment is discarded. Ar. inccmir.g 
segment containing a RST is discarded. An incoming segment not 
containing a RST causes a RST te be sent in response. The 
acknowledgment and sequence field values are selected to make the 
reset sequence acceptable to the TC? that sent the offending 
segment. 

If the ACX bit is off, sequence number zéro is used, 
<SEQ=0XACX=SEG. SEQ+SEG. LENXCTL =RST, ACX> 

If the ACX bit is on, 

<SEQ=SEG. ACXXCTL =RST> 

Return. 

If the State is LISTEN then 
first check for an ACX 

Any acknowledgment is bad if it arrives en a connection still in 
the LISTEN State. An acceptable reset segment shculd be fermed 
for any arriving ACX-bearing segment, except ancther RST. The 
RST should be fermatted as fcllows: 


<SEQ=SEG. ACXXCTL =RST> 


Return. 

An inccming RST should be ignered. Return. 

if there was ne ACX theh check fer a SYN 

If the SYN bit is set, check the security. If the 
security/ccmpartment on the inccming segment dees net exactly 
match the security/compartment in the TCB then send a reset and 
return. If the SEG.PRC is less thar. the TC3.PRC then send a 
reset and return. If the SEG.PRC is greater than the TCB.PRC 
then set TCB.PRC<-SEG.PRC. New RCV.NXT and RCV.LBB are set to 
SEG.SEQ+1, 1RS is set to SEG.SEQ and any other control or text 
shculd be queued for Processing later. ISS should be selected 
and a SYN segment sent cf the form: 


[Page 64] 



January 1980 


Transmission Contrcl Protocol 
Functicr.al Spécification 


SEGMENT ARRIVES 


<3EQ=ISSXACX=RCV. NXTXCTL=SYN, ACK> 

SND.NXT and SND.LBB are set te ISS+1 and 3ND.UNA to ISS. The 
connection State should be changed te SYN-RECEIVED. Note that 
any other incoming ccntrol or data (ccmbined with SYN) will be 
processed in the SYN-RECEIVED State, but prccessing of SYN and 
ACX should not be repeated. If the listen was not fully 
specified (i.e., the foreigr. socket was not fully specified) , 
then the unspecified fields should be filled in now. 

if there was ne SYN but there was cther text or ccntrol 

Any other contrcl or text-bearing segment (not ccntaining SYN) 
must hâve an ACX and thus wculd be discarded by the ACX 
prccessing. An incoming RST segment cculd not be valid, since 
it cculd net hâve been sent in respcr.se te anything sent by this 
incarnation of the connection. So ycu are unlikely to get here, 
but if you de, drop the segment, and return. 

If the state is SYN-SENT then 

first check fer an ACX 

If SEG.ACX =< ISS, or SEG.ACX > SND.NXT, or the 
security/compartment in the segment dees net exactly match the 
security/compartment in the TCB, cr the precedence in the 
segment is less than the precedence ir. the TCB, ser.d a reset 

<SEQ=SEG. ACXXCTL = RST> 

and discard the segment. Return. 

If SND.UNA =< SEG.ACX =< SND.NXT and the security/compartment 
and precedence are acceptable then the ACX is acceptable. 

SND.UNA should be advar.ced to equal SEG.ACX, and any segments en 
the retransmission queue which are thereby ackr.owledged should 
be remeved. 

if the ACX is ok (cr there i3 ne ACX), check the RST bit 

If the RST bit is set then signal the user "error: connection 
reset", enter CLOSED State, drop the segment, delete TC3, and 
return. 

if the ACX is ok (cr there is ne ACX) and it was not a RST, check 
the SYN bit 
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If the SYN bit ia en and the security/ccmpartment and precedence 
are acceptable then, RCV.NXT and RCV.LBB are set to SEG.SEQ+1, 
1RS is set to SEG.SEQ. If SND.UNA > ISS (cur SYN has been 
ACXed), change the connection state te ESTABLISHED, ctherwise 
enter SYN-RECEIVED. In any case, fcrm an ACK segment: 

<SEQ=SND . NXTXACX=RCV. NXTXCTL =ACK> 

and send it. Data or contrôla which were queued for 
transmission may be ir.cluded. 

If SEG.PRC is greater than TC3.PRC set TC3.PRC<-SEG.PRC. 

If there are other Controls or text in the segment then continue 
Processing at the fifth step below where the URG bit is checked, 
othervise return. 


; 
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Otherwise, 

first check sequence number 

SYN-RECEIVED STATE 
ESTABLISHED STATE 
FIN-WAIT-1 STATE 
FIN-WAIT-2 STATE 
TIME-WAIT STATE 
CLOSE-WAIT STATE 
CLOSING STATE 

Segments are prccessed in sequence. Initial tests on arrivai 
are used to discard old duplicates, but further prccessir.g is 
done in SEG.SEQ order. If a segment's contents straddle the 
bcundary between old and new, only the new parts shculd be 
processed. 

There are four cases for the acceptability test for an inccming 
segment : 

Segment Receive Test 
Length Window 


0 

0 

>0 

>0 


0 SEG.SEQ = RCV.NXT 

>0 RCV.NXT =< SEG.SEQ < RCV.NXT+RCV.WND 

0 net acceptable 

>0 RCV.NXT < SEG.SEQ+SEG.LEN =< RCV.NXT+RCV.WND 


Note that the test abeve guarantees that the last sequence 
number used by the segment lies in the receive-window. If the 
RCV.WND is zéro, ne segments will be acceptable, but spécial 
allcwance shculd be made te accept valid ACXs, URGs and RSTs. 

If an incoming segment is net acceptable, an ackncwledgment 
shculd be sent in reply: 

<SEQ=SND. N XTXACX = RCV.NXT >< CTL =ACX> 


If the inccming segment is unacceptable, drop it and return. 
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second check security and precedence 

If the security/compartment and precedence in the segment do not 
exactly match the security/compartment and precedence in the .TCB 
then form a reset and return. 

Note this check is placed following the sequence check to prevent 
a segment from an old connection between these parts with a 
different security or precedence frcm causing an abort of the 
current connection. 

third check the ACX field, 

SYN-RECEIVED STATE 

If the RST bit is off and SND.UNA < SEG.ACX =< SND.NXT then set 
SND.UNA <- SEG.ACX, remove any acknowledged segments from the 
retransmission queue, and enter E3TA3LISHED state. 

If the segment acknowledgment is net acceptable, form a reset 
segment, 

<SEQ=3EG. ACXXCTL =RST> 

and send it, unless the inccming segment is an RST (cr there is 
no ACX), in which case, it shculd be discarded, then return. 

ESTABLISHED STATE 

If SND.UNA < SEG.ACX =< SND.NXT then, set SND.UNA <- SEG.ACX. 
Any segments on the retransmission queue which are thereby 
entirely acknowledged are remeved. Usera shculd receive 
positive ackncwledgments fer buffers which hâve beer. SENT and 
fully acknowledged (i.e., SEND buffer shculd be returned with 
"ck" response) . If the ACX is a duplicate, it can be igr.cred. 

If the segment passes the sequence number ar.d acknowledgment 
number tests, the send window shculd be updated. If 
SND.WL =< SEG.SEQ, set SND.WND <- SEG.WND and set 
SND.Wl <- SEG.SEQ. 

If the remete buffer size is net cne, then the 
end-of-letter/buffer-size adjustment to sequence numbers may 
hâve an effect on the next expectad sequence number te be 
acknowledged. It i3 possible that the remote TC? will 
acknowledge with a SEG.ACX equal to a sequence number cf an 
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octet that was skipped cver at the end of a letter. This a mild 
error on the remote TCPs part, but net cause for alarm. 

FIN-WAIT-1 STATE 
FIN-WAIT-2 STATE 

In addition to the-Processing fer the ESTABLISHED state, if the 
retransmission queue is empty, the user's CLOSE can be 
acknowledged ("ok") but do not delete the TCB. 

TIME-WAIT STATE 

The only thing that can arrive in this state is a retransmission 
of the remote FIN. Acknowledge it, and restart the 2 MSL 
timeout. 

CLOSE-WAIT STATE 

Do the same prccessing as fer the ESTABLISHED state. 

CLOSING STATE 

If the ACX ackncwledges cur FIN then delete the TCB (enter the 
CLOSED state), otherwise ignore the segment. 

fourth check the RST bit, 

SYN-RECEIVED STATE 

If the RST bit is set then, if the segment has passed sequence 
and acknowledgment tests, it is valid. If this connection was 
initiated with a passive OPEN (i.e., came frem the LISTEN 
state), then return this connection te LISTEN state. The user 
need net be infermed. If this connection was initiated with an 
active OPEN (i.e., came frem SYN-SENT state) then the connection 
was refused, signal the user "connection refused". In either 
case, ail segments on the retransmission queue should be 
remeved. 
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ESTABLISHED 
FIN-WAIT-1 
FIN-WAIT-2 
CLOSE-WAIT 
CLOSING STATE 

If the RST bit is set then, any outstanding RECEIVEs and SEND 
should receive "reset" responses. Ail segment queues should be 
flushed. Users should also receive an unsolicited general 
"connection reset" signal. Enter the CLOSED State, delete the 
TC3, and return. 

TIME-WAIT 

Enter the CLOSED State, delete the TC3, and return. 

fifth, check the 3YN bit, 

SYN-RECEIVED 
ESTABLISHED STATE 

If the SYN bit is set, check the segment sequence number against 
the receive windcw. The segment sequence number must be in the 
receive window; if not, ignore the segment. If the SYN is on 
and SEG.SEQ = 1RS then everything is ck and ne action is needed; 
but if they are net equal, there is an errer and a reset must be 
sent. 

If a reset must be sent it is formed as fcllcws: 

<SEQ=SEG. ACKXCTL =RST> 

The connection must be aborted as if a RST had been received. 

FIN-WAIT STATE-i 
FIN-WAIT STATE-2 
TIME-WAIT STATE 
CLOSE-WAIT STATE 
CLOSING STATE 

This case should not occur, since a duplicata cf the SYN which 
started the current connection incarnation will hâve been 
filtered in the SEG.SEQ prccessing. Other SYN's will hâve been 
rejected by this test as well (see SYN prccessing for 
ESTABLISHED State). 
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sixth, check the URG bit, 

ESTABLISHED STATE 
FIN-WAIT-1 STATE 
F IN-WAIT-2 STATE 

If the URG bit is set, RCV.UP <- max(RCV.UP,SEG.UP), and signal 
the user that the remcte side has urgent data if the urgent 
pointer (RCV.UP) is in advance of the data consumed. If the 
user has already been signaled (or is still in the "urgent 
mode") fer this continuous sequence cf urgent data, de net 
signal the user again. 

TIME-WAIT STATE 
CLOSE-WAIT STATE 
CLOSING 

This should net cccur, since a FIN has been received from the 
remcte side. Ignore the URG. 

seventh, prccess the segment text, 

ESTABLISHED STATE 

Once in the ESTABLISHED state, it is possible to deliver segment 
text te user RECEIVE buffers. Text from segments can be moved 
intc buffers until either the buffer is full cr the segment is 
empty. If the segment empties and carries an EOL flag, then the 
user is infermed, when the buffer is returned, that an EOL has 
been received. 

If buffer sise is net cr.e octet, then de the fcllowing 
end-cf-letter/buffer-size adjustment Processing: 

if EOL = 0 then 

RCV.NXT <- SEG.SEQ + SEG.LEN 

if EOL = 1 then 

Whiie RCV.LBB < 3EG.SEQ+SEG.LEN 
Do RCV.LBB <- RCV.LBB + RCV.BS End 
RCV.NXT <- RCV.LBB 

When the TC? takes respensibility for delivering the data te the 
user it must aise ackncwledge the receipt of the data. Send an 
ackncwledgment of the form: 
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<SEQ=SND.NXTXACX = RCV.NXT><CTL=ACX> 

This acknowledgment should be—piggybacked on a segment being 
transmitted if possible without incurring undue delay. 

FIN-WAIT-1 STATE 
FIN-WAIT-2 STATE 

If there are outstanding RECEIVEs, they should be satisfied, if 
possible-, with the text of this segment; remaining text should 
be queued for further Processing. If a RECEIVE is satisfied, 
the user should be notified, with "end-of-letter" (EOL) signal, 
if appropriate. 

TIME-WAIT STATE 
CLOSE-WAIT STATE 

This should net occur, since a FIN has been received frem the 
remete side. Ignore the segment text. 

eighth, check the FIN bit, 

Send an acknowledgment for the FIN. Signal the user "connection 
closing", and return any pending RECEIVEs with same message. Note 
that FIN implies EOL for any segment text not yet delivered to the 
user. If the current state is ESTABLISHED, enter the CLOSE-WAIT 
State. If the current state is FIN-WAIT-1, enter the CLOSING 
state. If the current state is FIN-WAIT-2, enter the TIME-WAIT 
state. 

and return. 
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USER TIMEOUT 

* 


USER TIMEOUT 

For any state if the user timeout expires, flush ail queues, signal 
the user "error: connection aborted due to user timeout" in general 
and fer any outstanding calls, delete the TCB, and return.. 

RETRANSMISSION TIMEOUT 

For any state if the retransmission timeout expires on a segment in 
the retransmission queue, send the segment at the front of the 
retransmission queue again, reinitialize the retransmission timer, 
and return. 


y 


J 
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3. FUNCTIONAL SPECIFICATION 


3.1. Header Format 

TCP segments are sent as internet datagrams. The Internet.Protocol 
•header carries several information fields, including the source and 
destination host addresses [2]. A TCP header follows the internet 
header, supplying information spécifie to the TCP protocol. This 
division allow3 for the existence of host level protocols other than 
TCP. 

TCP Header Format 


0 12 3 

01234567890123456789012345678901 


+—I A 1~-1 !— A —+—+—+—+—H —A ! i— A —+—I— A — +-A — A — A —+—-1— A — +-+-+-A—A 1—+ 

! Source Port ! Destination Port ' 

I Sequence Number ! 

1—+-+-•■I—+-+—+-+-+-+-+—+-+-+-+-+-+-H—-I—+-+—I—-I—-I—-I—+—H 

' Acknowledgment Number ! 

A —+—1—-I— A —-I—1—-I—+-+-+—+-+-+-+-H—-I—-I—1—-I—+-+-+—1—1 V 

! Data ! ! U ! A !E! R!s! F! ! 

! Offset! Reserved iR !Cjo!S ! Y ! I ! Window ! 

! ! ! G ! K i L ! T ! N ! N ! 


! Checksum ! Urgent Pointer ! 

! Options ! Padding ! 


data 


A h—h—i— A — A — A—A — A — A (—H— A —+—-1— A —+—-<— A — A—A h— A —+—+—-1— A — +—•i — A — A—A b 


TCP Header Format 

Note that one tick mark représenta one bit position. 

Figure 3. 

Source Port: 16 bits 
The source port number. 

Destination Port: 16 bits 
The destination port number. 
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Sequence Number: 32 bits 

The sequence number of the first data octet in this segment (except 
when SYN is présent). 

Acknowledgment Number: 32 bits 

If the ACK ccntrcl bit is set this field contains the value cf the 
next sequence number the sender of the segment is expecting to 
receive. Once a connection is established this is always sent. 

Data Offset: .4 bits 

The number of 32 bit wcrds in the TCP Header. This indicates where 
the data begir.s. The TCP header includir.g options is an intégral 
number of 32 bits long. 

Reserved: 6 bits 

Reserved for future use. Must be zéro. 

Control Bits: 8 bits (frcm left te right): 

URG: Urgent Pointer field significant 

ACK: Acknowledgment field significant 

EOL: End of Letter 

RST: Reset the connection 

SYN: Synchrcnize sequence numbers 

FIN: No more data frcm sender 

Windcw: 16 bits 

The number cf data octets beginning with the one indicated in the 
acknowledgment field which the sender of this segment is willir.g to 
accept. 

Checksum: 16 bits 

The checksum field is the 16 bit one's complément of the one's 
complément sum of ail 16 bit wcrds in the header and text. If a 
segment contains an edd number of header and text octets to be 
checksummed, the last octet is padded en the right with zéros te 
fcrm a 16 bit word for checksum purposes. The pad is net 
trar.smitted as part of the segment. While computing the checksum, 
the checksum field itself i3 replaced with zéros. 

The checksum aise cevers a 96 bit pseudo header ccnceptually 
prefixed to the TCP header. This pseude header contains the Source 
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Address, the Destination Address, the Protocol, and TCP length. 

This gives the TCP protection against misrcuted segments. This 
information is carried in the Internet Protocol and is transferred 
across the TCP/Network interface in the arguments or résulta of 
calls by the TCP on the IP. 

+ - - - + 

| Source Address ! 

+ - + 

! Destination Address I 

-4-■-‘---4" 

! zéro | PTCL ! TCP Length ! 

--- 

The TCP Length is the TCP header plus the data length in octets 
(this is not an explicitly transmitted quantity, but is ccmputad 
frcm the total length, and the header length). 

Urgent Pointer: 16 bits 

This field comraunicates the current value of the urgent pointer as a 
positive offset from the sequence number in this segment. The 
urgent pointer points te the sequence number cf the octet follcwing 
the urgent data. This field should only be interpreted in segments 
with the URG control bit set. 

Options: variable 

Options may occupy space at the end cf' the TCP header and are a 
multiple of 8 bits in length. Ail options are included in the 
cnecksum. An option may begin en an y octet boundary. There are twe 
cases fer the format cf an option: 

Case 1: A single octet of option-kind. 

Case 2: An octet cf option-kind, an octet cf opticn-length, and 
the actual opticn-data octets. 

The opticn-length counts the twe octets of option-kind and 
cption-length as well as the opticn-data cctet3. 

Note that the list of options may be sherter than the data offset 
field might imply. The content of the header beyend the 
End-of-Opticn option should be header padding (i.e., zéro). 

A TC? must implement ail options. 
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Currently defined options include (kind indicated in octal): 


Kind Length Meaning 


0 

1 

100 

105 


End of option list. 

No-Operation. 

Reserved. 

4 Buffer Size. 


Spécifie Option Définitions 
End of Option List 


100000000 ! 

H-+ 

Kind=0 

This option code indicates the end cf the option list. This 
might not ccincide with the end of the TCP header according te 
the Data Offset field. This is used at the end cf ail options, 
net the end of each option, and need only be used if the end cf 
the options would net otherwise coincide with the end of the TCP 
he ad er. 

No-Operaticn 

H-t- 

loooooooi! 

H-1- 

Kind= 1 

This option code may be used between options, for example, to 
align the beginning of a subséquent option on a word boundary. 
There is no guarantee that senders will use this option, so 
receivers must be prepared to prccess options even if they do 
net begin on a werd boundary. 

Buffer Size 

H-H-H-4-+ 

101000101100000100! buffer size ! 

+ - + - + - + -(. 

Kind=105 Length=4 


[Page 18] 











January 1980 


Transmission Control Protocol 
Functional Spécification 


Buffer Size Option Data: 16 bits 

If this option is présent,-then it communicates the receive 
buffer size at the TCP which sends this segment. This field 
should only be sent in the initial connection requedt (i.e., 
in segments with the SYN control bit set). If this option is 
not used, the default buffer size of one octet is assumed. 

Padding: variable 

The TCP header padding is used to ensure that the TCP header ends 
and data begins on a 32 bit boundary. The padding is cotnposed of- 
zéros. 


3.2. Terminology 

Before we can discuss very much about the operation of the TCP we need 
to introduce some detailed terminology. The maintenance of a TCP 
connection requires the remembering of several variables. We conceive 
of these variables being stored in a connection record called a 
Transmission Control Block or TC3. Among the variables stored in the 
TCB are the local and remote Socket numbers, the security and 
precedence of the connection, pointers to the user'3 send and receive 
buffers, pointers to the retransmit queue and te the current segment. 
In addition several variables relating to the send and receive 
sequence numbers are stored in the TCB. 

Send Sequence Variables 


SND.UNA - send unacknowledged 
SND.NXT - send sequence 
SND.WND - send window 
SND.BS - send buffer size 
SND.UP - send urgent pointer 

SND.WL - send sequence number used for last window update 
SND.L3B - send last buffer beginning 
ISS - initial send sequence number 


Receive Sequence Variables 


RCV.NXT 
RCV.WND 
RCV.BS 
RCV.UP 
RCV.LBB 
1RS 


- receive sequence 

- receive window 

- receive buffer size 

- receive urgent pointer 

- receive last buffer beginning 

- initial receive sequence number 
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The follcwing diagrams may help to relate some of these variables te 
the sequence space. 

Send Sequence Space — 

1 2 3 4 

I I I 

-,- | - | ————— 

SND.UNA SND.NXT SND.UNA 

+SND.WND 

1 - old sequence numbers which hâve been acknowledged 

2 - sequence numbers cf unacknowledged data 

3 - sequence numbers allowed for new data transmission 

4 - future sequence numbers which are net yet allowed 

Send Seauence SDace 


Figure 4. 


Receive Sequence Space 

1 2 3 

— ———————— [ — — — — — —— j ———— — — 

RCV.NXT RCV.NXT 
+RCV.WND 

1 - old sequence numbers which hâve been acknowledged 

2 - sequence numbers allowed for new réception 

3 - future sequence numbers which are not yet allowed 

Receive Sequence Space 
Figure 5. 


There are also some variables used frequently in the discussion that 
take their values from the fields of the current segment. 
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Current Segment Variables 

SEG.SEQ - segment sequence number 

SEG.ACK - segment acknowledgment number 

SEG.LEN - segment length 

SEG.WND - segment window 

SEG.UP - segment urgent pointer 

SEG.PRC - segment precedence value 

A connection progresses through a sériés of States during its 
lifetime. The States are: LISTEN, SYN-SENT, SYN-RECEIVED, 
ESTABLISHED, FIN-WAIT-1, FIN-WAIT-2, TIME-WAIT, CLOSE-WAIT, CLOSING, 
and the fictional State CLOSED. CLOSED is fictional because it 
représenta the State when there is no TCB, and therefore, ne 
connection. Briefly the meanings of the States are: 

LISTEN - représenta waiting fer a connection request frem any remote 
TC? and port. 

SYN-SENT - représenta waiting for a matching connection request 
after having sent a connection request. 

SYN-RECEIVED - représenta waiting for a confirming connection 
request acknowledgment after having both received and sent a 
connection request. 

ESTABLISHED - représenta an open connection, ready to transmit and 
receive data segments. 

FIN-WAIT-1 - représenta waiting for a connection termination request 
from the remote TCP, or an acknowledgment of the connection 
termination request previously sent. 

FIN-WAIT-2 - represents waiting for a connection termination request 
from the remote TCP. 

TIME-WAIT - représenta waiting fer enough time te pass te be sure 
the remote TCP received the acknowledgment of its connection 
termination request. 

CLOSE-WAIT - represents waiting fer a correction termination request 
from the local user. 

CLOSING - represents waiting for a connection termination request 
acknowledgment from the remote TCP. 


CLOSED - représenta no connection State at ail. 
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A TCP connection progresses from one State to another in response to 
events. The events are the user calls, OPEN, SEND, RECEIVE, CLOSE, 
ABORT, and STATUS; the incoming segments, particularly those 
containing the SYN and FIN flags; and timeouts. 

The Glossary contains a more complété li 3 t of terms and their 
définitions. 

The State diagram in figure 6 only illustrâtes State changes, together 
with the causing events and resulting actions, but addresses neither 
error conditions nor actions which are not connected with State 
changes. In a later section, more detail is offered with respect to 
the reaction of the TCP to events. 
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SYN 
R CTO 


CLOSE 
snd FIN 
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FIN ',< 
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+- 
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-\ active OPEN 
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CLOSE 

delete TCB 


SEND 
snd SYN 


snd ACK 


rcv FIN 
snd ACK 


CLOSE 
snd FIN 


I 

+- 


rcv ACK of FIN 


V snd ACK 


Timeout=2MSL 


delete TCB 


V delete TCB 


ITIME WAITi-> ! CLOSED 

+-+ +- 


I 


\ 


SYN 

SENT 


+- 

->: 

1 


-——+ 

CLOSE ! 
WAIT ! 


TC? Connection State Diagram 
Figure 6. 
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3.3. Sequence Numbers 

A fundamental notion in the design is that every octet of data sent 
over a TCP connection has a sequence number. Since every octet is 
sequenced, each of them can be acknowledged. The acknowledgment 
mechanism employed is cumulative so that an acknowledgment of sequence 
number X indicates that ail octets up to but not including X hâve been 
received. This mechanism allows for straight-forward duplicate 
détection in the presence of retransmission. Numbering of octets 
within a segment is that the first data octet immediately following 
the header is the lowest numbered, and the following octets are 
numbered consecutively. 

It is essential to remember that the actual sequence number space is 
finite, though very large. This space ranges from 0 to 2**32 - 1. 
Since the space is finite, ail arithmetic dealing with sequence 
numbers must be performed modulo 2**32. This unsigned arithmetic 
préserves the relationship of sequence numbers as they cycle from 
2**32 - 1 to 0 again. There are some subtleties to computer modulo 
arithmetic, so great care should be taken in programming the 
comparison of such values. The typical kinds of sequence number 
comparisons which the TCP must perform include: 

(a) Determining that an acknowledgment refers to some sequence 
number sent but not yet acknowledged. 

(b) Determining that ail sequence numbers occupied by a segment 
hâve been acknowledged (e.g., to remove the segment from a 
retransmission queue). 

(c) Determining that an incoming segment contains sequence numbers 
which are expected (i.e., that the segment "overlaps" the 
receive window). 
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/ 


On send 
older 


connections the following comparisons are needed: 

sequence numbers newer sequence numbers 


SND.UNA SEG.ACX SND.NXT 

i i ! 

i i i 


-xxxxxxx 

I 

! 

I 

l 


•xxxxxxxxxx 

I I 

I I 


V 

'A. 

I 

I 

1 

I 


xxxxx- 


Segment 1 Segment 2 Segment 3 

<-sequence space-> 


Sending Sequence Space Information 
Figure 7. 

SMD.UNA = oldest unackr.owledged sequence number 
SND.NXT = next sequence number to be sent 

SEG.ACX = acknowledgment (next sequence number expected by the 
acknowledging TCP) 

SEG.SEQ = first sequence number of a segment 

SEG.SEQ+SEG.LEN-1 = last sequence number of a segment 

A new acknowledgment (called an "acceptable ack") , is one for which 
the inequality below holds: 


SND.UNA < SEG.ACX =< SND.NXT 


Ail arithmetic is modulo 2**32 and that comparisons are unsigned. 

" = <" means "less than or equal" . 

A segment on the retransmission queue is fully acknowledged if the sum 
of its sequence number and length is less than the acknowledgment 
value in the incoming segment. 

SEG.LEN is the number of octets occupied by the data in the segment. 

It is important to note that SEG.LEN must be non-zero; segments which 
do not occupy any sequence space (e.g., empty acknowledgment segments) 
are never placed on the retransmission queue, so would not go through 
this particular test. 


J 
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On receive connections the following comparisons are needed : 

older sequence numbers newer sequence numbers 


RCV.NXT 


-XXX 


XXX- 


RCV.NXT+RCV.WND 


-XXXXXXXXXX-XXX 


XX- 


Segment 1 Segment 2 


Segment 3 


<-sequence space-> 

Receiving Sequence Space Information 
Figure 8. 

RCV.NXT = next sequence number expected on incoming segments 

RCV.NXT+RCV.WND = last sequence number expected on incoming 
segments, plus one 

SEG.SEQ = first sequence number occupied by the incoming segment 

SEG.SEQ+SEG.LEN-1 = last sequence number occupied by the incoming 
segment 

A segment is judged to occupy a portion of valid receive sequence 
space if 

0 =< (SEG.SEQ+SEG.LEN-1 - RCV.NXT) < (RCV.NXT+RCV.WND - RCV.NXT) 


SEG.SEQ+SEG.LEN-1 is the last sequence number occupied by the segment; 
RCV.NXT is the next sequence number expected on an incoming segment; 
and RCV.NXT+RCV.WND is the right edge of the receive wir.dow. 

Actually, it is a little more complicated than this. Due to zéro 
Windows and zéro length segments, we hâve four cases for the 
acceptability of an incoming segment: 
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Segment Receive Test 
Length Window 


0 

0 

SEG.SEQ = RCV.NXT 

0 

>0 

RCV.NXT =< SEG.SEQ < RCV.NXT+RCV.WND 

>0 

0 

not acceptable 

>0 

>0 

RCV.NXT < SEG.SEQ+SEG.LEN =< RCV.NXT+RCV.WND 


Note that the acceptance test for a segment, sincs it requires the end 
of a segment to lie in the window, is somewhat more restrictive than 
is absolutely necessary. If at least the first sequence number of the 
segment lies in the receive window, or if some part of the segment 
lies in the receive window, then the segment might be judged 
acceptable. Thus, in figure 3, at least segments 1 and 2 are 
acceptable by the strict rule, and segment 3 may or may not be, 
depending on the strictness of interprétation of the rule. 

Note that when the receive window is zéro no segments should be 
acceptable except ACX segments. Thus, it should be possible for a TCP 
to maintain a zéro receive window while transmitting data and 
receiving ACXs. 

We hâve taken advantage of the numbering scheme to protect certain 
control information as well. This is achieved by implicitly including 
some control flags in the sequence space so they can be retransmitted 
and acknowledged without confusion (i.e., one and only one copy of the 
control will be acted upon). Control information is not physically 
carried in the segment data space. Consequently, we must adopt rules 
for implicitly assigr.ing sequence number s to control. The SYN and FIN 
are the only Controls requiring this protection, and these Controls 
are used only at connection opening and closing. For sequence number 
purposes, the SYN is considered to occur before the first actual data 
octet of the segment in which it occurs, while the FIN is considered 
to occur after the last actual data octet in a segment in which it 
occurs. The segment length includes both data and sequence space 
occupying Controls. When a SYN is présent then SEG.SEQ is the 
sequence number of the SYN. 

Initial Sequence Number Sélection 

The protocol places no restriction on a particular connection being 
used over and over again. A connection is defined by a pair of 
sockets. New instances of a connection will be referred to as 
incarnations of the connection. The problem that arises owing to this 
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is — "how does the TCP identify duplicata segments from pravious 
incarnations of the connection?" This problem becomes apparent if the 
connection is being opened and closed in quick succession, or if the 
connection breaks with loss of memory and is then reestablished. 

To avoid confusion we must pravent segments from one incarnation of a 
connection from being used while the same sequence numbers may still 
be présent in the network from an earlier incarnation. We want te 
assure this, even if a TCP crashes and loses ail knowledge of the 
sequence numbers it has been using. When new connections are created, 
an initial sequence number (ISN) generator is employed which selects a 
new 32 bit ISN. The generator is bound to a (possibly fictitious) 32 
bit clock whose lov order bit is incremented roughly every 4 
microseconds. Thus, the ISN cycles approximately every 4.55 hours. 
Since we assume that segments will stay in the network no more thar. 
tens of seconds or minutes, at worst, we car» reasonably assume that 
ISN's will be unique. 

For each connection there is a send sequence number and a receive 
sequence number. The initial send sequence number (ISS) is chosen by 
the data sending TCP, and the initial receive sequence number (1RS) is 
learned during the connection establishing procedure. 

For a connection to be established or initialized, the two TCPs must 
synchronise on each other's initial sequence numbers. This is done in 
an exchange of connection establishing messages carrying a control bit 
called "SYN" (for synchronize) and the initial sequence numbers. As a 
shorthand, messages carrying the SYN bit are also called "SYNs". 

Hence, the solution requires a suitable mechanism for picking an 
initial sequence number and a slightly involved handshake to exchange 
the ISN's. A "three way handshake" is necessary because sequence 
numbers are not tied to a global clock in the network, and TCPs may 
hâve different mechanisms for picking the ISN's. The receiver of the 
first SYN has no way of knowing whether the segment was an old delayed 
one or not, unless it remembers the last sequence number used on the 
connection (which is not always possible) , and so it must ask the 
sender to verify this SYN. 

The "three way handshake" and the aavantages of a "clock-driven" 
scheme are discussed in [4]. 

Knowing When to Keep Quiet 

To be sure that a TCP does not create a segment that carries a 
sequence number which may be duplicated by an old segment remaining in 
the network, the TC? must keep quiet for a maximum segment lifetime 
(MSL) before assigning any sequence numbers upon starting up or 
recovering from a crash in which memory of sequence numbers in use was 
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lost. For this spécification the MSL is taken to be 2 minutes. This 
is an engineering choice, and may be changed if expérience indicates 
it is désirable to do so. Nota that if a TCP is reinitialized in some 
sense, yet retains its memory of sequence numbers in use, then it need 
not wait at ail; it must only be sure to use sequence numbers larger 
than those recently used. 

It should be noted that this strategy does not protect against 
spoofing or other replay type duplicate message problems. 

3.4. Establishing a connection 

The "three-way handshake" is the procedure used to establish a 
connection. This procedure normally is initiated by one TCP and 
responded to by another TCP. The procedure also Works if two TCP 
simultaneously initiate the procedure. When simultaneous attempt 
occurs, the TCP receives a "SYN" segment which carries no 
acknowledgment after it has sent a "SYN". Of course, the arrivai of 
an old duplicate "SYN" segment can potentially make it appear, to the 
récipient, that a simultaneous connection initiation is in progress. 
Proper use of "reset" segments can disambiguate these cases. Several 
examples of connection initiation follow. Although these examples do 
not show connection synchronization using data-carrying segments, this 
is perfectly legitimate, so long as the receiving TCP doesn't deliver 
the data to the user until it is clear the data is valid (i.e., the 
data must be buffered at the receiver until the connection reaches the 
ESTABLISHED state). The three-way handshake reduces the possibility 
of false connections. It is the implémentation of a trade-off betweer. 
memory and messages to provide information for this checking. 

The simplest three-way handshake is shown in figure 9 below. The 
figures should be interpreted in the following way. Each line is 
numbered for reference purposes. Right arrows (—>) indicate 
departure of a TCP segment from TCP A to TCP B, or arrivai of a 
segment at B from A. Left arrows (<—), indicate the reverse. 

Ellipsis (...) indicates a segment which is still in the network 
(delayed). An "XXX" indicates a segment which is lost or rejected. 
Comments appear in parenthèses. TCP States represent the State AFTER 
the departure or arrivai of the segment (whose contents are shown in 
the center of each line). Segment contents are shown in abbreviated 
form, with sequence number, control flags, and ACX field. Other 
fields such as window, addresses, lengths, and text hâve been left out 
in the interest of clarity. 
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TCP A 



TCP B 

1 . 

CLOSED 



LISTEN 

2. 

SYN-SENT 

—> 

<SEQ = 100 XCTL =S YN > 

__> SYN-RECEIVED 

3. 

ESTABLISHED 

<— 

<SEQ=300><ACK=101 XCTL =SYN, ACK> 

<__ SYN-RECEIVED 

4. 

ESTABLISHED 

—> 

<SEQ = 101 ><ACK=301 XCTL =ACK> 

—> ESTABLISHED 

5. 

ESTABLISHED 

- - y 

<SEQ=101 XACK=301 > <CTL =ACKXDATA> 

—> ESTABLISHED 


Basic 3-Way Handshake for Connection Synchronization 

Figure 9. 

In line 2 of figure 9, TCP A begins by sending a SYN segment 
indicating that it will use sequence numbers starting with sequence 
number 100. In line 3, TCP B sends a SYN and acknowledges the SYN it 
received from TCP A. Note that the acknowledgment field indicates TCP 
B is now expecting to hear sequence 101, acknowledging the SYN which 
occupied sequence 100. 

At line 4, TCP A responds with an empty segment containing an ACK for 
TCP B's SYN; and in line 5, TCP A sends some data. Note that the 
sequence number of the segment in line 5 is the same as in line 4 
because the ACK does not occupy sequence number space (if it did, we 
would wind up ACKing ACK's!). 

Simultaneous initiation is only slightly more complex, as is shown in 
figure 10. Each TCP cycles from CLOSED to SYN-SENT to SYN-RECEIVED to 
ESTABLISHED. 

The principle reason for the three-way handshake is to prevent old 
duplicate connection initiations from causing confusion. To deal with 
this, a spécial control message, reset, has been devised. If the 
receiving TCP is in a non-synchronized State (i.e., SYN-SENT, 
SYN-RECEIVED), it returns to LISTEN on receiving an acceptable reset. 
If the TCP is in one of the synchronized States (ESTABLISHED, 
FIN-WAIT-1, FIN-WAIT-2, TIME-WAIT, CLOSE-WAIT, CLOSING), it aborts the 
connection and informs its user. We discuss this latter case under 
"half-open" connections below. 
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TCP A 



TCP B 

1. 

CLOSED 



CLOSED 

2. 

SYN-SENT 

—> 

<SEQ = 100XCTL =SYN> 


3. 

SYN-RECEIVED 

<— 

<SEQ=300XCTL =SYN> 

<__ SYN-SENT 

4. 


. .. 

<SEQ =100 > < CTL =S YN > 

—> SYN-RECEIVED 

5. 

SYN-RECEIVED 

—> 

<SEQ= 101 XACX=301 XCTL =ACX> 

. .. 

6. 

ESTABLISHED 

<— 

<SEQ=301 XACX = 101 XCTL =ACX> 

<__ SYN-RECEIVED 

7. 


... 

<SEQ=101 XACX=301 XCTL =ACX> 

—> ESTABLISHED 


Simultaneous Connection Synchronization 
Figure 10. 


1 . 

2 . 

3. 

4. 

5. 


TCP A 


TCP B 

CLOSED 


LISTEN 

SYN-SENT 

—> <SEQ=100XCTL=SYN> 

... 

(duplicate) 

... <SEQ = 1000XCTL =SYN> 

—> SYN-RECEIVED 

SYN-SENT 

<— <SEQ=300XACX = 1001 XCTL =S YN, ACX> 

<__ SYN-RECEIVED 

SYN-SENT 

—> <SEQ = 1001XCTL = RST> 

—> LISTEN 


6 . 

7. 

8 . 


... <SEQ = 100XCTL =SYN> 

SYN-SENT <— <SEQ=400XACX=101XCTL=SYN, ACX> 
ESTABLISHED —> <SEQ = 1 01 XACX = 401 XCTL =ACX> 

Recovery from Old Duplicata SYN 


—> SYN-RECEIVED 
<— SYN-RECEIVED 
—> ESTABLISHED 


Figure 11. 

As a simple example of recovery from old duplicatas, cor.sider 
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figure 11. At line 3. an old duplic 2 te SYN arrives at TCP B. TCP B 
cannot tell that this is an old duplicate, so it responds normally 
(line 4). TCP A detects that the ACK field is incorrect and returns a 
RST (reset) with its SEQ field selected to make the segment 
believable. TCP B, on receiving the RST, returns to the LISTEN State. 
When the original SYN (pun intended) finally arrives at line 6, the 
synchronisation proceeds normally. If the SYN at line ô had arrived 
before the RST, a more complex exchange might hâve occurred with RST's 
sent in both directions. 

Half-Open Connections and Other Anomalies 

An establisheti connection is said to be "h 2 lf-open" if one of the 
TCPs h 2 s closed or aborted the connection at its end without the 
knowledge of the other, or if the two ends of the connection hâve 
become desynchronized owing to a crash that resulfced in loss of 
memory. Such connections will automatically become reset if an 
attempt is made to send data in either direction. However, half-open 
connections are expected to be unusual, and the recovery procedure is 
mildly involved. 

If at site A the connection no longer exists, ther. an attempt by the 
user at site B to send any data on it will resuit in the site B TCP 
receiving a reset control message. Such a message should indicate to 
the site B TCP that something is wrong, and it is expected to abort 
the connection. 

Assume that two user processes A and B are commur.icating with one 
another when a crash occurs causing loss of memory to A's TCP. 
Depending on the operating System supporting A's TCP, it is likely 
that some error recovery mechanism exists. When the TCP is up again, 

A is likely to start again from the beginning or from a recovery 
point. As a resuit, A will probably try to OPEN the connection again 
or try to SEND on the connection it believes open. In the latter 
case, it receives the error message "connection not open" from the 
local (A's) TCP. In an attempt to establish the connection, A's TCP 
will send a segment containing SYN. This scénario leads to the 
example shown in figure 12. After TCP A crashes, the user attempts to 
re-open the connection. TCP B, in the meantime, thinks the connection 
is open. 
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/ 


1 . 
2 . 

3. 

4. 

5. 

6 . 

7. 


TC? A 
(CRASH) 

CLOSED 

SYN-SENT —> <SEQ=400XCTL=SYN> 

(!!) <— <SEQ=300XACK= 100XCTL =ACX> 

SYN-SENT —> <SE3 = 100XCTL = RST> 

SYN-SENT —> <SEQ = 4C0XCTL=SYN> 


TCP B 

(send 300,receive 100) 
ESTABLISHED 
—> (??) 

<— ESTABLISHED 
— > (Abort! !) 
CLOSED 


Half-Open Connection Discovery 
Figure 12. 

tfhen the SYN arrives at line 3, TCP B, being in a synchronized State, 
responds with an acknowledgment indicating what sequence it next 
expects to hear (ACX 100). TCP A sees that this segment does not 
acknowledge anything it sent and, being unsynchronized, sends a reset 
(RST) because it has detected a half-oper. connection. TC? B abcrt3 at 
line 5. TCP A will continue to try to establish the connection; the 
problem is now reduced to the basic 3-«ay handshake of figure 9. 

An interesting alternative case occurs when TC? A crashes and TCP B 
tries to send data on what it thinks is a synchronized connection. 

This is illustrated in figure 13. In this case, the data arriving at 
TC? A from TCP B (line 2) is unacceptable because no such connection 
exista, so TCP A sends a RST. The RST is acceptable so TCP B 
processes it and aborts the connection. 


y 
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TCP A ~ TCP 3 

1. (CRASH) (send 300.receive 100) 

2. (??) <— <SEQ=300><ACK=100XDATA=10XCTL=ACX> <— ESTABLISHED 

3. —> <SEQ = 100><CTL = RST> —> (ABORTü) 

Active Side Causes Half-Open Connection Discovery 

Figure 13. 

In figure 14, we find the two TCPs A and B with passive connections 
waiting for SYN. An old duplicata arriving at TCP B (line 2) stirs B 
into action. A SYN-ACK is returned (line 3) and causes TCP A to 
generate a RST (the ACX in line 3 is not acceptable). TCP B accspts 


the 

reset and 

returns to its passive LISTEN 

State 

• 


TCP A 



TCP B 

1 . 

LISTEN 



LISTEN 

2. 

. . . 

<SEQ=ZXCTL=SYN> 

— > 

SYN-RECEIVED 

3. 

(??) <— 

<SEQ=XXACK=Z+1 XCTL =SYN, ACX> 

<— 

SYN-RECEIVED 

4. 

—> 

<SEQ=Z + 1 XCTL =RST> 

-> 

(return to LISTEN!) 

5. 

LISTEN 



LISTEN 


Old Duplicate SYN Initiâtes a Reset on two Passive Sockets 

Figure 14. 

A variety of other cases are possible, ail of which are accountad for 
by the following rules for RST génération and processing. 

Reset Génération 

As a general rule, reset (RST) should be sent whenever a segment 
arrives which apparently is not intended for the current or a future 
incarnation of the connection. A reset should not be sent if it is 
not clear that this is the case. Thus, if any segment arrives for a 
nonexistant connection, a reset should be sent. If a segment ACKs 
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something which has never been sent on the current connection, then 
one of the following two cases applies. 

1. If the connection is in any non-synchronized State (LISTEN, 
SYN-SENT, SYN-RECEIVED) or if the connection does not ex'ist, a reset 
(RST) should be formed and sent for any segment that acknowledges 
something not yet sent. The RST should take its SEQ field from the 
ACK field of the offending segment (if the ACK control bit was set), 
and its ACX bit should be reset (zéro), except to refuse a initial 
SYN. A reset is also sent if an incoming segment has a security level 
or compartment which does not exactly match the level and compartment 
requested for the connection. If the precedence of the incoming- 
segment is less than the precedence level requested a reset is sent. 

2. If the connection is in a synchronized State (ESTABLISHED, 
FIN-WAIT-1, FIN-WAIT-2, TIME-WAIT, CLOSE-WAIT, CLOSING), any 
unacceptable segment should elicit only ar. empty ackr.owledgment 
segment containing the current send-sequence number and an 
acknowledgment indicatir.g the next sequence number expected to be 
received. 

Reset Processing 

Ail reset (RST) segments are validated by checking their SEQ-fields. 

A reset is valid if its sequence number is in the window. In the case 
of a RST received in response to an initial SYN any sequence number is 
acceptable if the ACX field acknowledges the SYN. 

The receiver of a RST first validâtes it, then changes state. If the 
receiver was in the LISTEN state, it ignores it. If the receiver was 
in SYN-RECEIVED state and had previously been in the LISTEN state, 
then the receiver returns to the LISTEN State, otherwise the receiver 
aborts the connection and goes to the CLOSED state. If the receiver 
was in any other State, it aborts the connection and advises the user 
and goes to the CLOSED state. 

3.5. Closing a Connection 

CLOSE is an operation meaning "I hâve no more data to send." The 
notion of closing a full-duplex connection is subject to ambiguous 
interprétation, of course, since it may not be obvious how to treat 
the receiving side of the connection. We hâve chosen to treat CLOSE 
in a simplex fashion. The user who CLOSEs may continue to RECEIVE 
until he is told that the other side has CLOSED also. Thus, a program 
could initiate several SENDs followed by a CLOSE, and then continue to 
RECEIVE until signaled that a RECEIVE failed because the other side 
has CLOSED. We assume that the TCP will signal a user, even if no 
RECEIVEs are outstanding, that the other side has clcsed, so the user 
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can terminate his side gracefully. A TCP will reliably deliver ail 
buffers SENT before the connection was CLOSED so a user who expects no 
data in return need only wait to hear the connection was CLOSED 
successfully to know that ail his data was received at the destination 
TCP. 

There are essentially three cases: 

1) The user initiâtes by telling the TCP to CLOSE the connection 

2) The remote TCP initiâtes by sending a FIN control signal 

3) Both users CLOSE simultaneously 

Case 1: Local user initiâtes the close 

In this case, a FIN segment can be constructed and placed on the 
outgoing segment queue. No further SENDs from the user will be 
accepted by the TCP, and it enters the FIN-WAIT-1 State. RECEIVEs 
are allowed in this State. Ail segments preceding and including FIN 
will be retransmitted until acknowledged. When the other TCP has 
both acknowledged the FIN and sent a FIN of its own, the first TCP 
can ACX this FIN. It should be noted that a TCP receiving a FIN 
will ACX but not send its own FIN until its user has CLOSED the 
connection also. 

Case 2: TCP reçoives a FIN from the network 

If an unsolicited FIN arrives from the network, the receiving TCP 
car. ACX it and tell the user that the connection is closing. The 
user should respond with a CLOSE, upon which the TCP can send a FIN 
to the other TCP. The TCP then waits until its own FIN is 
acknowledged whereupon it deletes the connection. If ar. ACX is not 
forthcoming, after a timeout the connection is aborted and the user 
i s to ld . 

Case 3”. both users close simultaneously 

A simultar.eous CLOSE by users at both ends of a connection causes 
FIN segments to be exchar.ged. When ail segments preceding the FINS 
hâve been processed and acknowledged, each TC? can ACX the FIN it 
has received. Both will, upon receiving these ACXs, delete the 
connection. 
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TCP A 




TCP B 

1. 

ESTABLISHED 




ESTABLISHED 

2. 

(Close) 
FIN-WAIT-1 

—> 

<SEQ=100XCTL=FIN> 

—> 

CLOSE-WAIT 

3. 

FIN-WAIT-2 

<— 

<SEQ=300XACK = 101 XCTL=ACK> 

<— 

CLOSE-WAIT 

n. 

TIME-WAIT 

<— 

<SEQ=301 XCTL =F IN> 

<— 

(Close) 
CLOSING 

5. 

TIME-WAIT 

—> 

<SEQ= 100XACK=301 XCTL =ACK> 

—> 

CLOSED 

6. 

(2 MSL ) 
CLOSED 






Normal Close Sequence 
Figure 15. 


TCP A 


TCP B 


1. ESTABLISHED 


ESTABLISHED 


2. (Close) 

FIN-WAIT-1 —> <SEQ = 100XCTL =FIN> 
<— <SEQ=300XCTL=FIN> 
... <SEQ = 100XCTL =FIN> 


(Close) 

... FIN-WAIT-1 
<— 


3- CLOSING —> <SEQ=100XACK = 301XCTL=ACK> 
<— <SEQ=300XACK = 1 01 XCTL=ACK> 
... <SEQ=100XACK=301XCTL =ACK> 


... CLOSING 
<— 

— > 


4. CLOSED 


CLOSED 


Simultaneous Close Sequence 
Figure 16. 
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3.6. Precedence and Security 

The intent is that connection be allowed only between ports operating 
with exactly the same security and compartment values and at the 
higher of the precedence level requested by the two parts. 

The precedence levels are: 

flash override - 111 

flash - 110 

immédiate - 10X 

priority - 01X 

routine - 00X 

The security levels are: 

top secret - 11 
secret - 10 

confidential - 01 
unclassified - 00 

The compartments are assigned by the Defense Communications Agency. 
The defaults are precedence: routine, security: unclassified, 
compartment: zéro. A host which does not implement precedence or 
security feature should clear these fields to zéro for segments it 
sends. 

A connection attempt with mismatched security/compartment values or a 
lower precedence value should be rejected by sending a reset. 

Note that TCP modules which operate only at the default value of 
precedence will still hâve to check the precedence of incoming 
segments and possibly raise the precedence level they use on the 
connection. 

3.7. Data Communication 

Once the connection is established data is communicated by the 
exchange of segments. Because segments may be lost due to errors 
(checksum test failure), or network congestion, TCP uses 
retransmission (after a timeout) to ensure delivery of every segment. 
Duplicata segments may arrive due to network or TCP retransmission. 

As discussed in the section on sequence numbers the TCP performs 
certain tests on the sequence and acknowledgment numbers in the 
segments to verify their acceptability. 

The sender of data keeps track of the next sequence number to use in 
the variable SND.NXT. The receiver of data keeps track of the next 
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sequence number to expect in the variable RCV.NXT. The sender of data 
keeps track of the oldest unacknowïedged sequence number in the 
variable SND.UNA. If the data flow is momentarily idle and ail data 
sent has been acknowledged then the three variables will be equal. 

When the sender créâtes a segment and transmits it the sender advances 
SND.NXT. When the receiver accepts a segment it advances RCV.NXT and 
sends an acknowledgment. When the data sender receives an 
acknowledgment it advances SND.UNA. The extent to which the values of 
these variables differ is a measure of the delay in the communication. 

Normally the amount by which the variables are advanced is the length 
of the data in the segment. However, when letters are used there are 
spécial provisions for coordination the sequence numbers, the letter 
boundaries, and the receive buffer boundaries. 

End of Letter Sequence Number Adjustments 

There is provision in TCP for the receiver of data to optionally 
communicate to the sender of data on a connection at the time of the 
connection synchronization the receiver's buffer size. If this is 
J done the receiver must use this fixed size of buffers for the lifetime 

of the connection. If a buffer size is communicated then there is a 
coordination between receive buffers, letters, and sequence numbers. 

Each time a buffer is completed either due to being filled or due to 
an end of letter, the sequence number is incremer.ted through the end 
of that buffer. 

That is, whenever an EOL is transmitted, the sender advances its send 
sequence number, SND.NXT, by an amount sufficient to consume ail the 
unused space in the receiver's buffer. The amount of space consumed 

in this fashion is subtracted from the send window just as is the 

space consumed by actual data. 

And, whenever an EOL is received, the receiver advances its receive 
sequence number, RCV.NXT, by an amount sufficient to consume ail the 
unused space in the receiver's buffer. The amount of space consumed 

in this fashion is subtracted from the receive window just as is the 

space consumed by actual data. 


* 
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newer sequence numbers 
Buffer 2 


r++ 


older sequence numbers 

I Buffer 1 


i 


xxxxxxxxxxxxxxxxxxx: 

<-SEG.LEM-> 


SEG.SEQ 


XXX - data octets from segment 
+++ - phantom data 

<- sequence space -> 

End of Letter Adjustment 

Figure 17. 

In the case illustrated above, if the segment does not carry an EOL 
flag, the next value of SND.MXT or RCV.MXT will be A. If it does 
carry an EOL flag, the next value will be B. 

The exchange of buffer size and sequer.cing information is done in 
units of octets. If no buffer size is stated, then the buffer size is 
assumed to be 1 octet. The receiver tells the sender the size of the 
buffer in a SYN segment that contains the 16 bit buffer size data in 
an option field in the TC? header. 

Each EOL advances the sequence number (SM) to the next buffer boundary 

While LBB < SEG.SEQ+SEG.LEM 
Do LBB <- LBB + BS End 
SM <- L3B 


where LBB is the Last Buffer Beginning, and BS is the buffer size. 

The CLOSE user call implies an end of letter, as does the FIN control 
flag in an incoming segment. 

The Communication of Urgent Information 

The objective of the TCP urgent mechar.ism is to allow the sending user 
to stimulate the receiving user to aceept some urgent data and to 
permit the receiving TCP to indicate to the receiving user when ail 
the currentiy known urgent data has been received by the user. 
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This mechanism permits a point in the data stream to be designated as 
the end of "urgent" information. Whenever this point is in advance of 
the receive sequence number (RCV.NXT) at the receiving TCP, that TCP 
should tell the user to go into "urgent mode"; when the receive 
sequence number catches up to the urgent pointer, the TCP should tell 
user to go into "normal mode". If the urgent pointer is updated while 
the user is in "read fast" mode, the update will be invisible to the 
user. 

The method employs a urgent field which is carried in ail segments 
transmitted. The URG control flag ir.dicates that the urgent field is 
meaningful and should be added to the segment sequence number to yield 
the urgent pointer. The absence of this flag indicates that the 
urgent pointer has not changed. 

To send an urgent indication the user must also send at least one data 
octet. If the sending user also indicates end of letter, timely 
delivery of the urgent information to the destination process is 
enhanced. 

Managing the Window 

The window sent in each segment indicates the range of sequence number 
the sender of the window (the data receiver) is currently prepared to 
accept. There is an assumption that this is related to the currently 
available data buffer space available for this connection. The window 
information is a guideline to be aimed at. 

Indicating a large window encourages transmissions. If more data 
arrives than can be accepted, it will be discarded. This will resuit 
in excessive retransmissions, adding unnecessarily to the load on the 
network and the TCPs. Indicating a small window may restrict the 
transmission of data to the point of ir.troducing a round trip delay 
between each new segment transmitted. 

The mechanisms provided allow a TCP to advertise a large window and to 
subsequently advertise a much smaller window wit'nout having accepted 
that much data. This, so called "shrinking the window," is strongly 
discouraged. The robustness principle dictâtes that TCPs will not 
shrink the window themselves, but will be prepared for such behavior 
on the part of other TCPs. 

The sending TCP must be prepared to accept and send at least one octet 
of new data even if the send window is zéro. The sending TCP should 
regularly retnansmit to the receiving TC? even when the window is 
zéro. Two minutes is recommended for the retransmission interval when 
the window is zéro. This retransmission is essential to guarantee 
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that when either TCP has a zéro window the re-opening of the window 
will be reliably reported to the other. 

The sending TCP packages the data to-be transmitted into segments 
which fit the current window, and may repackage segments on the 
retransmission queue. Such repackaging is not required, but may be 
helpful. 

Users must keep reading connections they close for sending until the 
TCP says no more data. 

In a connection with a one-way data flow, the window information will 
be carried in acknowledgment segments that ail hâve the same sequence 
number so there will be no way to reorder them if they arrive out of 
order. This is not a serious problem, but it will allow the window 
information to be on occasion temporarily based on old reports from 
the data receiver. 

3.8. Interfaces 

There are of course two interfaces of concern: the user/TCP interface 
and the TCP/IP interface. We hâve a fairly elaborate model of the 
user/TCP interface, but only a sketch of the interface to the lower 
level protocol module. 

User/TCP Interface 

The functional description of user commands to the TCP is, at best, 
fictional, since every operating System will hâve different 
facilities. Consequently, we must warn readers that different TCP 
implémentations may hâve different user interfaces. However, ail 
TCPs must provide a certain minimum set of services to guarantee 
that ail TCP implémentations can support the same protocol 
hierarchy. This section spécifiés the functional interfaces 
required of ail TCP implémentations. 

TCP User Commands 

The following sections functionally characterize a USER/TCP 
interface. The notation used is similar to most procedure or 
function calls in high level languages, but this usage is not 
meant to rule out trap type service calls (e.g., SVCs, UUOs, 

EMTs). 

The user commands described below specify the basic fur.ctions the 
TCP must perform to support interprocess communication. 

Individual implémentations should define their own exact format, 
and may provide combinations or subsets of the basic functions in 
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single calls. In particular, some implémentations may wish to 
automatically OPEN a connection on the first SEND or RECEIVE 
issued by the user for a given connection. 

In providing interprocess communication facilities, the TCP must 
not only accept commands, but must also return information to the 
processes it serves. The latter consists of: 

(a) general information about a connection (e.g., interrupts, 
remote close, binding of unspecified foreign socket). 

(b) replies to spécifie user commands indicating success or 
various types of failure. 


Open 


Format: OPEN (local port, foreign socket, active/passive 
[, buffer size] [, timeout] [, precedence] 

[, security/compartment]) -> local connection name 

We assume that the local TCP is aware of the identity of the 
processes it serves and will check the authority of the process 
to use the connection specified. Depending upon the 
implémentation of the TCP, the local network and TCP ider.tifiers 
for the source address will either be supplied by the TC? or by 
the processes that serve it (e.g., the program which interfaces 
the TCP network). These considérations are the resuit of 
concern about security, to the extent that no TCP be able to 
masquerade as ar.other one, and so on. Similarly, no process car, 
masquerade as another without the collusion of the TCP. 

If the active/passive flag is set to passive, then this is a 
call to LISTEN for an incoming connection. A passive open may 
hâve either a fully specified foreign socket to wait for a 
particular connection or an unspecified foreign socket to wait 
for any call. A fully specified passive call can be made active 
by the subséquent execution of a SEND. 

A full-duplex transmission control block (TCB) is created and 
partially filled in with data from the OPEN command parameters. 

On an active OPEN command, the TCP will begin the procedure to 
synchronize (i.e., establish) the connection at once. 

The buffer size, if présent, indicates that the caller will 
always receive data from the connection in that size of buffers. 
This buffer size is a measure of the buffer between the user and 


) 
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